Security info & security codes

To help protect you, we're asking everyone with a Microsoft account to have up-to-date security info, like an alternate email address or phone number. Then, if you forget your password or if someone else tries to take over your account, Microsoft can send a security code to your security info. When you send it back to us, we know that you’re really you, and we can get you back in to your Microsoft account.

To add or remove security info to your Microsoft account right now, go to Manage advanced security on the Microsoft account website, and sign in. Under Security info helps keep your account secure, you’ll see the security info we have for you now.

Does your phone block calls or texts from unknown numbers?

Unblock your phone, and choose I don’t have a code. We’ll send another security code.

Did your email send your security code to your junk folder?

Check your junk folder for a message from Microsoft account, and use the code you find there.

Is your phone number entered correctly, with all the numbers in the right order?

If it’s entered wrong, try adding the phone number again.

Is the country code correct for your phone number?

Try adding the phone number again, and use the drop-down list to choose the right country code for that phone number.

Is your email address correctly spelled?

If it’s misspelled, try adding the email again.

Does your alternate email address end in Hotmail.com, Live.com, or Outlook.com?

If so, you’re using one Microsoft account to verify another Microsoft account, which will work, but keeping track of which one you’re signed in with can be tricky. Here’s what’s probably happening: When you sign in to the second account (to get the code sent to that address), most browsers automatically sign you out of the first account (the one that's actually requesting the code).

If you're using Internet Explorer, you can sign in to the second account using an InPrivate Browsing session. This lets you get the code without having to sign out of the account that's asking for it.

When you're prompted to enter the security code sent to your alternate email address, don't close Internet Explorer.

Press Ctrl+Shift+P to open a new Internet Explorer window and turn on InPrivate Browsing.

In the new window, sign in to your alternate email account and look for the message from the Microsoft account team.
Copy or write down the security code from the message.

Return to the Internet Explorer window that is asking you for the code. Enter the security code and follow the instructions.
If you're using a different browser, check that browser’s help for info about "private browsing."

When you see a message asking you to make sure you can receive a security code, it means you'll need to verify or add new security info. You can skip it for 24 hours at a time, but after seven days from the first notice, you’ll have to verify or add new security info before you can sign in again.

We won’t ask you to verify your security info every time you sign in. Occasionally, we might ask you to check it again—for example, if you haven’t signed in for a long while. This is our way to double-check whether your info is current.

Your security info is only used to help protect your account. We'll never use security info to spam you or for any marketing purposes—it's only to verify your identity if there's ever a problem with your account.

If you only have one piece of security info, or if all of your security info won’t work, there’s a 30-day waiting period before you can add new info. This waiting period is to deter people from taking over your account. During this 30 day period you'll still be able to sign in to most of your services unless they require a security code. After that 30 days, you’ll be notified that the wait is over and it’s time to enter new security info. For more info, see How do I replace all my security info?